Report privately
Contact
[email protected]Include the affected URL or endpoint, a concise description, reproduction steps, approximate time and potential impact. Do not include other people’s personal data, passwords, session cookies or full payment details.
Please use restraint
- · Do not access, modify, download or retain another person’s data.
- · Do not test denial of service, spam, social engineering or destructive actions.
- · Stop testing if you encounter sensitive data and report the minimum necessary evidence.
- · Give BaziRoute a reasonable opportunity to investigate and mitigate before disclosure.
In scope
- · Authentication and session isolation.
- · Unauthorized access to saved charts or reports.
- · Cross-site scripting, injection or secret exposure.
- · Billing-webhook signature or entitlement bypass.
- · Privacy flows that reveal or fail to delete the wrong user data.
Not a security report
- · A calculator result you disagree with.
- · Normal email delivery or browser compatibility issues.
- · Reports produced only by an automated scanner without impact analysis.
- · Requests for free reports, links or unrelated marketing promotion.
No bug-bounty guarantee
BaziRoute does not currently operate a paid bug-bounty program. Acknowledgment and remediation are prioritized by verified impact. Good-faith reports are welcome, but submission does not create a reward contract.
Contact BaziRoute